Jeremy Galindo

**Name of the Vulnerable Software and Affected Versions** lldpd versions prior to 1.0.13 **Description** The issue arises when decoding SONMP packets in the sonmp decode function, allowing for an out-of-bounds heap read via short SONMP packets. **Recommendations** For versions prior to 1.0.13, update to version 1.0.13 or later to resolve the issue. As a temporary workaround, consider restricting the processing of short SONMP packets to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NTFS-3G versions prior to 2021.8.22 **Description** The issue is related to the implementation of the ntfs get attribute value function in the NTFS-3G file system driver. It is caused by an out-of-bound buffer access due to a missing consistency check after reading an MFT record, where the `bytes in use` field should be less than the `bytes allocated` field. This can lead to a heap buffer overflow, allowing for memory disclosure or denial of service when a specially crafted NTFS attribute is supplied to the function. The vulnerability can be triggered by mounting a crafted NTFS partition. **Recommendations** For NTFS-3G versions prior to 2021.8.22, update to version 2021.8.22 or later to resolve the issue. As a temporary workaround, consider restricting access to the ntfs get attribute value function until a patch is available. Avoid mounting crafted NTFS partitions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** hivex (affected versions not specified) **Description** A flaw in the hivex library allows an attacker to input a specially crafted Windows Registry (hive) file. This would cause hivex to recursively call the `get children()` function, leading to a stack overflow. The highest threat from this issue is to system availability. It is also related to a buffer overflow in memory, which can be exploited to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.